CVE-2011-1590: Wireshark

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.

Affected products

• Wireshark Wireshark: version 1.2.0 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.4 only; version 1.2.5 only; …

Published 2011-04-29. Last modified 2026-06-16.